CVE-2022-29929: 
JetBrains TeamCity vulnerability analysis and mitigation

CVE-2022-29929 is a cross-site scripting (XSS) vulnerability discovered in JetBrains TeamCity versions before 2022.04. The vulnerability was disclosed on May 12, 2022, and affects the application's handling of the Referrer header (NVD CVE).

The vulnerability is classified as CWE-79 (Improper Neutralization of Input During Web Page Generation), commonly known as Cross-site Scripting. It has received a CVSS v3.1 base score of 6.1 (MEDIUM) from NIST with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N, indicating network accessibility, low attack complexity, no privileges required, and user interaction required (NVD CVE).

The vulnerability could allow an attacker to execute malicious scripts in the context of the victim's browser, potentially leading to the disclosure of sensitive information and manipulation of web content. The CVSS metrics indicate low impacts on both confidentiality and integrity, with no impact on availability (NVD CVE).

The vulnerability has been fixed in JetBrains TeamCity version 2022.04. Users are advised to upgrade to this version or later to mitigate the risk (Vendor Advisory).